Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/zbmZy9ZqkzVRAgkq1HIBBxh8mrc.roa
File: zbmZy9ZqkzVRAgkq1HIBBxh8mrc.roa (raw, json)
Hash identifier: AiA/z9yYW5NQlThnQsAHt6beJm2NtTrZvo/49kI4fVM=
Subject key identifier: CD:B9:99:CB:D6:6A:93:35:51:02:09:2A:D4:72:01:07:18:7C:9A:B7
Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial: 0185719E6DB5E8777D35C2F1A259D8F11F39
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/zbmZy9ZqkzVRAgkq1HIBBxh8mrc.roa
Signing time: Mon 02 Jan 2023 08:34:46 +0000
ROA not before: Mon 02 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15169
IP address blocks: 2a00:79e1:380::/42 maxlen: 48
2a00:79e1:f00::/40 maxlen: 48
2a00:79e0::/31 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:6d:b5:e8:77:7d:35:c2:f1:a2:59:d8:f1:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Validity
Not Before: Jan 2 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdb999cbd66a93355102092ad4720107187c9ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:2a:f5:d5:8f:45:62:0b:2d:22:ef:14:35:
77:89:f1:25:d5:af:7e:e5:4c:07:e1:59:a9:d4:4b:
38:8d:64:61:9f:d5:50:d4:5f:a2:03:89:ff:64:7d:
a3:c7:68:36:11:3e:4e:88:07:fb:16:03:a7:0e:09:
f1:a6:43:f2:5b:a6:fa:90:05:a9:15:8a:21:6b:98:
60:97:25:c0:35:a8:d6:54:53:49:39:49:10:4c:b6:
a1:96:d4:66:9b:65:d4:a7:72:88:22:24:5a:69:f9:
33:81:eb:c8:16:39:6b:f5:c0:83:65:b2:56:e5:d3:
d7:66:f7:5e:b9:6c:ca:49:7f:e3:ba:54:eb:4c:41:
a5:6b:2c:69:54:a6:d3:71:8e:de:05:0e:ee:a8:2c:
b8:4d:73:dd:2d:49:b6:7f:19:25:c8:0d:32:c3:b2:
28:35:45:9d:c5:44:73:57:36:f4:12:70:a4:01:8c:
56:91:d6:58:f9:91:87:65:5a:3f:02:ff:bf:d6:a5:
81:d1:55:d0:23:c0:71:61:c2:2b:cc:fa:3c:b0:bb:
59:18:69:ef:95:e9:81:76:50:30:c8:44:fa:15:34:
f2:74:78:e6:1a:a2:33:72:81:17:a0:89:95:3a:39:
57:7b:21:87:3d:bd:6f:5b:68:66:45:1e:27:58:b8:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:99:CB:D6:6A:93:35:51:02:09:2A:D4:72:01:07:18:7C:9A:B7
X509v3 Authority Key Identifier:
keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/zbmZy9ZqkzVRAgkq1HIBBxh8mrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:79e0::/31
Signature Algorithm: sha256WithRSAEncryption
9e:a6:f6:4c:d1:60:da:8e:85:b6:22:64:52:23:0c:f1:99:87:
22:da:f1:47:ec:b9:12:8e:ae:42:69:f6:e1:88:f4:0f:b8:9d:
93:14:44:ce:c3:07:7f:0a:82:f2:87:bb:ce:17:74:b5:0f:49:
2b:85:e4:43:ac:9f:08:ff:db:76:d9:42:b7:32:5b:6a:bd:a0:
c1:a1:1e:3d:ea:e0:98:a0:8d:f2:87:b7:35:c3:6d:e3:c3:53:
f2:66:55:fa:a6:10:71:66:b2:bf:64:be:58:18:51:b3:8b:ae:
7a:c1:e1:52:2e:10:03:cb:08:fe:1c:e3:78:2c:58:e6:1d:3d:
e0:31:d8:dc:a3:6b:85:e9:c3:d4:a4:dc:9d:07:fe:97:ea:26:
83:80:f0:3f:41:e4:12:cb:26:2f:3f:c8:53:12:76:1b:e6:90:
27:fa:4d:6d:4b:52:b1:77:42:d6:54:b6:cf:a7:5c:94:85:76:
5f:c6:40:57:f8:b9:a2:c2:23:e9:71:26:75:83:c9:fc:c2:7c:
d1:df:df:b6:e6:f9:81:4a:74:d5:9e:9f:2a:1a:f2:0c:6f:50:
1f:08:5b:e4:b4:e0:2d:3c:38:76:bb:75:7f:3e:12:83:7a:b8:
8b:1d:2e:b7:e5:12:8e:31:38:b1:9f:28:86:6a:36:90:86:f8:
aa:50:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:55 2024 by rpki-client on console-fra.rpki-client.org